Carbon Sorted is operated for UK SMEs and processes personal data in accordance with the UK GDPR and the Data Protection Act 2018. This policy explains what we collect and why.
What we collect
- Account data, your name, email and organisation details.
- CRP data, the company information, activity data, targets and declaration you enter to produce a plan.
- Billing data, handled by our payment processor (Stripe); we do not store card numbers.
- Usage data, limited technical logs used to operate and secure the Service.
How we use it
We use your data to generate your Carbon Reduction Plan, maintain the tamper-evident provenance record for each plan, provide support, and meet our legal and accounting obligations. We do not sell your data, and we do not use your CRP content to train third-party models.
Retention and deletion
We retain your data for as long as your account is active. You can request export or deletion of your data at any time; on deletion we remove your personal data subject to records we must keep for legal and accounting purposes.
Your rights
You have the right to access, correct, export and erase your personal data, and to lodge a complaint with the Information Commissioner's Office (ICO). To exercise these rights, email [email protected].
Cookie Policy
We use cookies and similar storage technologies on carbonsorted.co.uk. This section explains what we set, why, and how you can control them.
Strictly necessary cookies
These cookies are required for the Service to function and cannot be switched off. They are set in response to actions you take, such as logging in or setting your preferences. They do not store any personally identifiable information.
- cb_consent, stores your cookie consent decision for 12 months.
- cb_visitor_id, a random identifier used only to associate a consent log entry with a single browser session. It contains no personal data.
- Session cookies, short-lived tokens used to authenticate your logged-in session. Deleted when you close your browser.
Analytics cookies (optional, consent required)
If you click Accept all, we may set analytics cookies to understand aggregate traffic patterns (e.g. pages visited, session duration). We do not use third-party advertising networks and your data is never sold. You can withdraw consent at any time by clicking “Cookie settings” in the footer, which resets your preference.
Third-party cookies
We use the following sub-processors that may set their own cookies:
- Stripe, payment processing. Stripe sets cookies necessary to prevent fraud.
- Google Fonts, font delivery. See Google's privacy policy.
How to manage or withdraw consent
You can change or withdraw your consent at any time by clearing thecb_cookie_consent key from your browser's local storage, or by clicking “Cookie settings” in the site footer. You can also configure your browser to block or delete cookies, refer to your browser's help documentation for instructions.
ICO compliance
Our cookie practices are designed to comply with the UK Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. We obtain prior consent before setting any non-essential cookies, make consent as easy to withdraw as to give, and maintain a server-side log of consent decisions. For questions about our cookie use, contact [email protected].